fix: Use aws_partition for govcloud users in ami_id_ssm_parameter_read policy definition (#2614)

jokreliable · web-flow · commit 7ac65e589b12 · 2022-11-04T00:32:55.000+01:00
diff --git a/modules/runners/scale-up.tf b/modules/runners/scale-up.tf
@@ -126,7 +126,7 @@ resource "aws_iam_role_policy" "ami_id_ssm_parameter_read" {
             "ssm:GetParameter"
           ],
           "Resource": [
-            "arn:aws:ssm:${var.aws_region}:${data.aws_caller_identity.current.account_id}:parameter/${trimprefix(var.ami_id_ssm_parameter_name, "/")}"
+            "arn:${var.aws_partition}:ssm:${var.aws_region}:${data.aws_caller_identity.current.account_id}:parameter/${trimprefix(var.ami_id_ssm_parameter_name, "/")}"
           ]
         }
       ]

Original file line number	Diff line number	Diff line change
`@@ -126,7 +126,7 @@ resource "aws_iam_role_policy" "ami_id_ssm_parameter_read" {`
`126`	`126`	`"ssm:GetParameter"`
`127`	`127`	`],`
`128`	`128`	`"Resource": [`
`129`		`- "arn:aws:ssm:${var.aws_region}:${data.aws_caller_identity.current.account_id}:parameter/${trimprefix(var.ami_id_ssm_parameter_name, "/")}"`
	`129`	`+ "arn:${var.aws_partition}:ssm:${var.aws_region}:${data.aws_caller_identity.current.account_id}:parameter/${trimprefix(var.ami_id_ssm_parameter_name, "/")}"`
`130`	`130`	`]`
`131`	`131`	`}`
`132`	`132`	`]`